From e87badc0f6fb20a443cf12bde9582ecbc2aef727 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Tue, 28 Apr 2015 17:18:48 +0200 Subject: IPA: do initgroups if extdom exop supports it Newer versions of the extdom plugin return the full list of group-memberships during a user lookup request. With these version there is no need to reject a initgroups request for sub/trusted-domain users anymore. This is e.g. useful for callers which call getgrouplist() directly without calling getpwnam() before. Additionally it helps if for some reasons the lifetime of the user entry and the lifetime of the initgroups data is different. Related to https://fedorahosted.org/sssd/ticket/2633 Reviewed-by: Jakub Hrozek --- src/providers/ipa/ipa_s2n_exop.c | 3 --- 1 file changed, 3 deletions(-) (limited to 'src/providers/ipa/ipa_s2n_exop.c') diff --git a/src/providers/ipa/ipa_s2n_exop.c b/src/providers/ipa/ipa_s2n_exop.c index d07923cff..3830a2b4b 100644 --- a/src/providers/ipa/ipa_s2n_exop.c +++ b/src/providers/ipa/ipa_s2n_exop.c @@ -50,9 +50,6 @@ enum response_types { }; /* ==Sid2Name Extended Operation============================================= */ -#define EXOP_SID2NAME_OID "2.16.840.1.113730.3.8.10.4" -#define EXOP_SID2NAME_V1_OID "2.16.840.1.113730.3.8.10.4.1" - struct ipa_s2n_exop_state { struct sdap_handle *sh; -- cgit